Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier: CpJG5bVCxkIT+6d+gmwp5TzIXmTypMDBJHRLrFmH0hE=
Subject key identifier: A9:51:DF:A0:3D:96:E2:5E:C2:FD:21:7B:20:69:09:AB:DC:02:9B:84
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial: 0197B88F2577B0086B6C983F32A5C45F1905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:18 +0000
Manifest this update: Sat 28 Jun 2025 22:01:18 +0000
Manifest next update: Sun 29 Jun 2025 22:01:18 +0000
Files and hashes: 1: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: y4vG3LSm9qI+bXfEaqv7sI6Cclviekfn+P4WHSzZaOo=)
2: gD2HCH7UZnug2JFbN0h_SjReLJU.roa (hash: 46J5NZnwRfdk2xDFMSmrrq3sdpnGs3ijOq3oqLGBAkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:25:77:b0:08:6b:6c:98:3f:32:a5:c4:5f:19:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
Validity
Not Before: Jun 28 22:01:18 2025 GMT
Not After : Jun 29 22:01:18 2025 GMT
Subject: CN=a951dfa03d96e25ec2fd217b206909abdc029b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:e7:1b:6a:5a:85:1e:15:19:f6:f5:f2:c9:
00:c1:fa:d3:34:c8:80:d8:5a:d1:2c:9f:cc:93:26:
a9:dd:7c:45:02:cf:b3:69:ee:ba:23:80:4a:64:ba:
6b:90:93:c6:3f:bb:1a:b0:4f:02:d7:5d:d9:33:8c:
36:06:7f:bc:e6:73:19:af:7f:3a:b7:9a:c2:7c:db:
b4:19:58:87:75:40:55:91:21:6c:96:88:2a:2f:d2:
ab:6e:f2:6a:d5:81:54:3e:da:e5:09:6a:b4:58:5c:
3a:46:14:9f:f9:06:18:9e:0d:02:35:35:30:d6:f7:
a4:59:c6:54:c0:35:bf:b6:c3:0e:f3:dc:c3:36:10:
32:1f:b2:6b:6c:b8:d0:92:fa:8b:e9:a4:53:10:72:
3f:cd:0d:07:fa:53:9f:b2:40:a3:71:d7:ad:73:22:
d1:e3:8a:f0:79:ed:b9:06:59:3a:b8:00:3e:da:58:
a0:9a:eb:30:8e:ee:d5:e0:f5:34:c9:93:35:2c:be:
6d:c1:0b:73:4f:b9:60:6d:44:61:d1:af:a9:ff:16:
f2:42:16:57:ff:dd:aa:be:84:b4:7e:15:4f:26:9c:
89:49:a6:52:39:c7:2a:e0:e2:cc:99:3a:cb:0e:6a:
49:9f:d5:e6:5e:00:01:2e:63:0e:0e:9a:2e:19:b5:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:DF:A0:3D:96:E2:5E:C2:FD:21:7B:20:69:09:AB:DC:02:9B:84
X509v3 Authority Key Identifier:
keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:bc:ff:c4:bf:35:53:c0:0f:0e:17:40:57:db:14:2c:a6:82:
42:20:76:5c:78:89:05:96:88:0d:76:7d:d5:72:0b:85:b7:fc:
af:9f:6b:74:08:42:7d:e9:5d:83:3a:47:b4:07:dd:72:d7:fa:
93:96:62:5a:9b:09:e8:ae:91:13:af:5a:62:c5:26:8b:a4:6a:
41:26:07:01:99:ad:e4:b0:b8:dd:d9:d3:c8:bd:a5:7d:4b:54:
d5:d0:2c:5c:12:7c:2b:47:e4:48:59:e8:db:8e:f5:e6:14:2b:
9b:cd:ee:53:4c:e3:76:f8:5c:6e:54:c6:f5:96:e0:96:f1:39:
cb:c2:e1:c6:f0:e7:19:d0:b7:cc:4b:d5:ad:eb:f2:95:8f:07:
d3:3e:05:c1:cd:5b:7a:ab:60:f9:6f:50:93:45:e2:8d:f2:54:
4f:ba:d5:5a:7c:e1:aa:b4:22:09:50:58:16:b6:2a:45:b3:c3:
8b:70:06:b9:4a:7f:d0:87:fa:78:8b:11:56:a3:1d:73:27:f4:
f8:61:13:84:87:98:fc:25:21:af:ee:1d:9d:d1:c0:6b:6d:a3:
54:69:41:bf:60:fc:82:25:5f:63:08:a6:40:be:1f:c3:92:18:
7a:bb:ba:3f:76:df:f9:7f:cf:b9:63:b1:ed:8b:ae:7f:30:86:
d5:b4:e9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:55 2025 by rpki-client